Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Nessus-Users
[Top] [All Lists]

Re: Netstat scanner does not seem to work on windows systems

Subject: Re: Netstat scanner does not seem to work on windows systems
Date: Fri, 03 Aug 2007 14:07:54 +0200
It worked 2 months ago against windows :

results|sxb.bsf.alcatel.fr|frillsdmzg4.sxb.bsf.alcatel.fr|general/tcp|11936|Security
 
Note|\nRemote operating system : Microsoft Windows Server 2003 Service 
Pack 1\nMicrosoft Windows Server 2003 Service Pack 2\nConfidence Level 
: 59\nMethod : SinFP\n\n \nThe remote host is running one of these 
operating systems : \nMicrosoft Windows Server 2003 Service Pack 
1\nMicrosoft Windows Server 2003 Service Pack 2\n
results|sxb.bsf.alcatel.fr|frillsdmzg4.sxb.bsf.alcatel.fr|general/tcp|19506|Security
 
Note|Information about this scan : \n\nNessus version : 3.0.5\nPlugin 
feed version : 200706190315\nType of plugin feed : Registered (7 days 
delay)\nScanner IP : 155.132.18.22\nPort scanner(s) : netstat \nPort 
range : 0-65535\nThorough tests : no\nExperimental tests : 
no\nParanoia level : 1\nReport Verbosity : 1\nSafe checks : 
yes\nOptimize the test : yes\nMax hosts : 1\nMax checks : 4\nScan 
Start Date : 2007/6/20 16:16\nScan duration : 885 sec\n\n
( excerpt of the nbe report )

Cordialement / Mit freundlichen Grüßen / Best regards,

Patrice ARNAL
Alcatel-Lucent

Ron Gula a écrit :
Patrice Arnal wrote:
  
Hello
I begin to use intensively credentials to check machines.
Recently, in order to reduce the network stress / false alerts caused by 
the network scan,
I checked out the "nessus TCP scanner" and checked in the "Netstat scanner"

I noticed that the netstat scanner does not appear in the report, and 
that, apparently,
only defaults ports were scanned, as if no scan took place.

The credentials are OK and the account used has "local admin" rights on 
the target :
I get a correct list for missing patches and the report tells me that 
"it was possible to log on the server"

Client : NessusClient 1 for Debian
Server : Nessus 3.0.5 on a Suse server
Target : W2k3

Apparently, it works well on Solaris targets : netstat shows up in the 
scanner list, and I did not
notice any missing ports.

Any idea of further testings...
    

The netstat port scanner only runs under UNIX OSes.

Ron Gula
Tenable Network Security

_______________________________________________
Nessus mailing list
Nessus@list.nessus.org
http://mail.nessus.org/mailman/listinfo/nessus

  

_______________________________________________
Nessus mailing list
Nessus@list.nessus.org
http://mail.nessus.org/mailman/listinfo/nessus

<Prev in Thread] Current Thread [Next in Thread>